What is CVE-2018-8890?

CVE-2018-8890 is a high-severity vulnerability in Blackberry Uem, classified under Information Disclosure. CVSS score: 7.5/10. Published 2018-10-12.

How severe is CVE-2018-8890?

High severity. CVSS v3 base score is 7.5 out of 10.

Information disclosure in Blackberry Uem

CVE-2018-8890

An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over a UEM user's session and perform administrative actions in the context of the user.

Vulnerability class: Information Disclosure

EPSS: 0.011 (61.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Blackberry Uem — versions 12.8.0 and 12.8.1
Blackberry Unified_endpoint_manager — versions 12.8.0, 12.8.1

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

secure@blackberry.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2018-8890?: CVE-2018-8890 is a high-severity vulnerability in Blackberry Uem, classified under Information Disclosure. CVSS score: 7.5/10. Published 2018-10-12.
How severe is CVE-2018-8890?: High severity. CVSS v3 base score is 7.5 out of 10.